Identification Please: Is Your Passport Leaking Sensitive Information? - ITS Tactical

Shop the ITS Store!

 

Identification Please: Is Your Passport Leaking Sensitive Information?

By Rob Henderson

Passport RFID

If you’ve ever traveled internationally outside the United States then chances are, you’re familiar with the passport you were required to obtain before traveling. While the passport is a simple means of identification and tracking visas, many people just consider their passport as such and don’t pay much attention to it when traveling. Unfortunately, passports may be providing information to strangers without you even realizing it.

RFID Technology in Passports

In 2007, the State Department started including an RFID (Radio Frequency Identification) chip inside every passport issued. This chip (denoted by the mark in the photo below) contained a digital version of the passport information, including a photo. They cited the need for increased security and preventing fraud with passports as the reason the chips were installed.

passport-main-003

We’ve covered RFID technology in the past and the possible insecurities it carries with it, so this is something to be concerned about. For those unfamiliar with RFID, it’s basically a passive chip technology that allows scanners within range to receive the data contained on it. While the scanner does need to be in close proximity, (a few feet) there’s no indication from the RFID chip that data is being scanned. So someone with an RFID reader could scan the chip inside your passport without you being aware of it.

In this article from CNET, a representative from the State Department responded to security concerns surrounding passport RFID chips and stated that even if the data were to be cloned, other security features like the use of Basic Access Control cryptography, would foil would-be impostors . BAC requires authentication before allowing access to the data. Furthermore, they also claim that the RFID chip can only be scanned when the passport is open, due to the RFID blocking elements contained in the cover.

While this may be the case, anyone that’s traveled internationally can tell you how often the passport must be held open while traveling. There have also been tests performed on RFID blocking devices and the results show that if the device isn’t completely sealed up, the chip can still be scanned. With passports never completely sealing, there’s a chance that the data could still be scanned, even when closed.

What Can Be Done?

If you currently have a passport containing one of these chips, you have a few methods of disabling the chip. The best and most non-invasive method is the use of a completely sealed RFID blocking device. This is a good thing to have with you when traveling as you can also keep your RFID enabled credit cards and keyless entry systems in there.

Looking for a more permanent method, some people have gone as far as placing a swift “percussive adjustment” on the section of their passport containing the RFID chip. While the State Department does not allow any tampering to a passport, they’ve said that the passport is considered valid even if the RFID isn’t working. However, if there are oddly shaped wear marks or any sign of tampering, they may consider the passport invalid, so keep that in mind.

The Passport Card

Passport Card

Recently, the State Department introduced the new Passport Card as an alternative identification to those traveling to Canada and Mexico by land. Rather than the full information contained in the Passport Book, the RFID chip contained within the Passport Card only stores a unique identification number that corresponds with information held in a government database. Bryan recently received his new Passport Card and shares his thoughts on the process below:

Bryan Black: If you’ve been reading ITS long enough, you may remember this article I wrote quite a few years ago on obtaining a duplicate passport. While I’ve never gotten around to getting a true duplicate passport, I have finally taken the time to obtain a Passport Card. Let me tell you, the process made me quite nervous.

First off, as Rob mentioned, the Passport Card has limitations. It is a form of government identification and can be used as such, but can’t be used for international travel by air. However, it can also be used for land border crossings or sea ports-of-entry into Canada, Mexico, the Caribbean and Bermuda. You can of course get back home with it too.

It also gives you a limited backup passport if you’re only traveling to the places I outlined above, as you can leave your standard Passport Book locked in the safe at home. The Passport Card does contain an RFID Chip embedded inside and comes with a protective sleeve, but I have my doubts on the paper sleeve blocking RFID readers. I’ll be keeping mine in the ITS RFID Wallet Sleeve, even though Passport Cards only contain a unique number rather than the complete information that the Passport Book offers.

The process for obtaining a Passport Card was nerve racking, I’d suggest paying the extra money when you purchase a Passport Book and get the card as well. If you have just a standard passport and want to add the Passport Card, you not only have to fill out paperwork to mail in (including payment) with new passport photos, but actually send your Passport Book through the mail with the application.

It only took about 4 weeks to do this, but being without my passport made me anxious, especially when I received the new Passport Card in the mail with a note that said my original passport would be shipped in a separate envelope. After another 5 days of waiting, I was just about to call the Dept. of State, when it showed up. This is exactly what I mentioned having a duplicate passport would be good for in my article years ago, maybe I’ll finally take my own advice and get that duplicate.

The Future of Passports

Even after everything we’ve said above about the RFID chip in your passport, the likelihood of someone being able to read the information and tamper with it is relatively low. However, we’re not as concerned with that aspect as we are about the fact that you have to retain a passport for 10 years.

This means that the RFID technology in your 2007 passport will be 10 years old before you’re able to renew. With all the technological advancements we’re making these days, the concern is that RFID could be become compromised on a large scale and millions of passports would be made vulnerable.

That’s the issue with technology like this, the “it’s probably fine” attitude isn’t good enough. There are people somewhere working on a method to extract more information from this technology at a larger distance. Rather than hoping that they don’t succeed, take matters into your own hands and protect your data to the best of your ability.

Are you getting more than 14¢ of value per day from ITS?

Thanks to the generosity of our supporting members, we’ve eliminated annoying ads and obtrusive content. We want your experience here at ITS to be beneficial and enjoyable.

At ITS, our goal is to provide different methods, ideas and knowledge that could one day save your life. If you’re interested in supporting our mission and joining our growing community of supporters, click below to learn more.

Discussion

  • bullitt4686

    Like in the linked article, what are good/valid reasons for requesting a duplicate?  Also, what are your thoughts on not having a passport if you have zero plans on leaving the US?  Should one have a passport just because?  Thanks in advance…

    • Craig

      Having a passport is a good idea for a couple of reasons. If you lose your drivers license, a passport can substitute as a government issued ID until your new license arrives. Plus who knows when you might see a great deal on a tropical vacation in the Caribbean. My wife and I went to St. Thomas on a whim and although you only need a DL since it’s an American island, there are good deals to the British, French & independent islands all the time.

  • bullitt4686

    Also, thoughts on ID strongholds products?  I have used their card sleeves for a while, and no known issues.  I realize that the operative word there is ‘known’, but feel good about it thus far.  In the multi pack they send, it included 2 RFID blocking passport sleeves that uses the same tech. as the credit card sleeves.  Looks like aluminum foil in the sleeve, vs just paper that you mentioned that came with the passport card.

    http://www.idstronghold.com/Passport-RFID-Blocking-Products.asp

  • Joe Gibson

    I bought an RFID blocking sleeve before I even got my passport in the mail.

  • bkm

    You didn’t explain why BAC doesn’t render this whole article pointless

  • Reddog245

    I appreciate the concern over security and also practice it with my various rfid equipped cards. But all this security at ground level seems like a fruitless exercise since so many are now hacking the same information directly from the government computers. How many Russian, Chinese, and Bulgarian hackers already have my info from their regular strolls through the VA databases? What info is on my passport that they don’t already have? We are careful about not being too open with our info, but find being alert on the other side, checking bills and credit reports and addressing problems quickly, is our better defense. Didn’t know about the card through. Great article.

  • donnalivingston

    if your passport is stolen can you get a replacement, one that is stamped with all the places you have been, or is the record of all the places you have been, lost forever, I hope not!!!  thanks so much

Do you have what you need to prevail?

Shop the ITS Store for exclusive merchandise, equipment and hard to find tactical gear.

Do you have what you need to prevail? Tap the button below to see what you’re missing.